Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf214b5f-1e99-36dd-8d7d-0907a73aeaff.roa
File:                     bf214b5f-1e99-36dd-8d7d-0907a73aeaff.roa (raw, json)
Hash identifier:          rX78W9GXAtVpsp9eALH9L904RA24e7ch/nUA6DK7kYI=
Subject key identifier:   74:AE:37:77:62:27:3C:42:35:B7:1D:9B:CE:18:6D:3A:0E:AE:48:56
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848D641119BFC4247EE52A44180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf214b5f-1e99-36dd-8d7d-0907a73aeaff.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     20115
IP address blocks:        71.86.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:11:9b:fc:42:47:ee:52:a4:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=0d948706-ecae-457c-852b-70130411c5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:30:4c:5b:91:95:cd:a8:21:c3:39:d2:83:
                    c6:ca:31:3c:c7:70:07:56:5c:e1:c6:5e:a5:5b:49:
                    4d:d9:24:87:55:64:f8:53:d8:6b:c4:f1:5b:16:8e:
                    1d:d5:9b:a2:a7:49:df:76:c1:86:a3:47:a1:1f:bf:
                    eb:c7:a1:b6:7a:be:88:ca:2d:0a:44:3c:8a:8e:18:
                    98:a1:1a:1d:11:19:fe:1c:8b:83:ad:aa:42:b2:b0:
                    be:0e:51:fa:e6:32:6f:6a:19:e6:e7:2f:fd:9d:cb:
                    a5:20:9c:1b:be:f7:36:77:05:91:90:2b:51:cf:05:
                    c4:f4:90:b9:72:92:39:94:ac:d9:93:95:c3:b1:34:
                    59:da:54:1f:ad:7a:1a:03:93:e0:61:5f:17:0c:9a:
                    a9:fb:5c:85:ec:3a:95:a5:d1:71:75:b7:9f:a5:5e:
                    2d:80:9c:bb:22:aa:23:12:13:f1:59:11:d9:eb:a7:
                    98:4a:0e:03:3a:a7:f8:70:11:d4:61:ce:98:dd:77:
                    81:a9:e6:53:9a:25:32:8d:3c:00:ba:b6:dd:42:53:
                    46:68:44:df:0b:0f:64:2a:c9:2e:ec:f5:f7:1d:5b:
                    aa:10:4c:e0:ae:01:c6:16:71:8a:5a:f7:d0:94:32:
                    ae:70:18:f6:69:70:cb:d3:70:79:4f:60:34:43:ff:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AE:37:77:62:27:3C:42:35:B7:1D:9B:CE:18:6D:3A:0E:AE:48:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf214b5f-1e99-36dd-8d7d-0907a73aeaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.86.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:45:c1:48:7d:26:a9:f9:9a:30:3e:32:53:95:cb:54:58:4f:
         cf:27:11:c6:54:a7:11:cc:f5:c8:a0:24:73:62:62:0a:6d:d8:
         2d:aa:1c:05:32:d3:a4:7c:f3:33:d2:c9:2d:15:df:39:e3:4b:
         36:7f:18:0c:af:99:8b:fa:09:95:bc:73:c5:b3:56:7a:09:db:
         2e:7c:65:46:01:f7:3f:ce:fd:bf:03:73:15:73:0a:9f:37:a0:
         53:96:25:bc:fd:58:9a:ae:19:1b:fc:67:57:66:dd:22:4e:db:
         27:87:0e:7a:44:86:09:5d:4c:da:5c:58:77:00:b7:1e:7d:08:
         ec:c8:c1:f9:e7:88:2d:b8:b3:0a:c6:27:c7:f2:50:24:92:0c:
         24:9b:c3:53:99:6c:78:55:b5:09:7b:9d:30:e5:a0:81:51:81:
         e6:00:b0:c2:97:13:61:05:fa:11:c8:ae:7d:64:66:2b:50:fa:
         8a:43:91:86:22:d0:2a:fb:fb:6d:21:0f:d1:35:1f:2a:8f:b6:
         6b:0a:15:a2:7a:f2:c2:62:c2:fc:b9:57:51:9e:a3:38:75:ba:
         d5:b1:57:97:02:d4:bd:e5:79:27:13:5b:1d:0c:d9:c1:0d:e0:
         be:69:5e:62:0f:13:28:81:c1:82:24:5f:61:0f:13:95:44:30:
         05:57:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:03 2025 by rpki-client